Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File:                     WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier:          Z24XyspCxiQ7bDD3m2TRTyOv5bAeFTwcdmbtGnvBLcQ=
Subject key identifier:   AC:C6:C5:6A:50:86:CB:E2:F9:DE:7D:EE:7F:D7:8C:AD:E8:51:5C:40
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer:       /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial:       0366
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number:          0360
Signing time:             Sun 05 Apr 2026 00:40:16 +0000
Manifest this update:     Sun 05 Apr 2026 00:40:16 +0000
Manifest next update:     Sun 12 Apr 2026 00:40:16 +0000
Files and hashes:         1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 1oikKA8nsI1Y7C1jeCB5gkEQtCxNugcNJ+DAnyOHrEI=)
                          2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: isEssEWm0725iSvQv15Srmh7ru8PYttLm9Qb+FYEb6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
                          rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
        Validity
            Not Before: Apr  5 00:40:16 2026 GMT
            Not After : Apr 12 00:40:16 2026 GMT
        Subject: CN=69d1af70-64cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:51:58:e4:79:6b:91:cc:f9:2a:c7:b3:58:
                    06:9b:26:67:69:b8:53:54:32:2f:52:d7:fe:4c:7b:
                    1a:3f:df:59:97:99:01:7f:64:50:aa:94:2b:b1:e2:
                    cb:27:92:00:ba:6c:15:28:53:99:d6:86:c3:3e:5c:
                    6d:e4:a4:a3:31:53:72:fa:9c:75:70:cb:d5:5c:92:
                    78:9c:51:2f:2a:a4:dc:21:33:d7:04:93:f9:9e:6e:
                    f9:32:06:9a:c0:14:8d:3c:61:60:75:5a:5c:6c:22:
                    d2:6c:7b:59:17:13:e1:9b:ad:e7:51:97:a5:1f:06:
                    bd:91:72:5d:b6:f5:ae:3f:9a:02:ae:b8:34:14:7b:
                    7a:c4:1e:a8:33:bb:cd:7c:e4:05:58:8f:74:bc:e7:
                    09:df:9a:0f:13:fa:c5:f6:72:2e:ff:20:6f:e3:72:
                    23:7d:93:48:52:96:8c:10:e6:f7:dd:5a:04:bc:ed:
                    e1:35:51:03:4c:45:1c:8f:64:24:0d:b2:8e:03:70:
                    2a:92:a4:1a:8c:5a:6b:1c:03:85:7f:ff:39:5d:6d:
                    1a:bc:c5:20:56:1a:2f:ab:6c:2b:a8:6f:f9:26:40:
                    36:1f:ff:e3:b8:8d:16:fa:0c:a8:a9:10:dc:1c:31:
                    91:57:80:be:80:63:f9:50:9d:92:bf:9e:37:64:b8:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:C5:6A:50:86:CB:E2:F9:DE:7D:EE:7F:D7:8C:AD:E8:51:5C:40
            X509v3 Authority Key Identifier:
                keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:31:bb:e2:ed:f9:e0:56:8b:80:f5:ac:a7:86:b8:0b:ce:
         22:b8:0f:4c:4c:29:2c:1a:c4:ef:05:0b:80:75:58:f1:7e:a3:
         50:24:58:54:aa:0b:79:d6:31:c7:f8:9e:fd:35:10:6c:67:87:
         d7:0d:fc:43:8f:75:21:8d:9e:48:97:b7:cf:e0:1c:87:31:40:
         2c:d6:e3:27:dd:49:2f:e6:73:6d:c4:ca:44:f0:d1:10:92:6a:
         23:2f:df:80:e6:db:89:ba:c3:af:cf:31:e1:b7:bb:0b:bb:60:
         dd:88:cb:64:9e:b2:a9:41:17:aa:d9:60:6b:6f:4a:5c:36:54:
         ef:e8:e1:0c:e8:88:90:43:1e:08:3f:c9:90:d0:9d:6d:14:d1:
         d4:94:2c:e5:ac:f2:3e:d5:d6:e0:10:9e:38:f0:57:d8:42:f0:
         9b:7b:53:70:bf:ca:f1:24:bc:52:17:8a:d9:0f:0b:58:ba:f1:
         44:ed:7a:53:b1:f4:e4:0c:76:4f:12:d4:b6:17:05:ac:37:91:
         96:e7:ba:0e:ef:2b:38:36:75:1c:07:d7:b1:8a:09:86:9a:8a:
         05:34:7d:87:0e:fd:32:13:07:fa:72:c4:a1:27:7b:fc:c0:a4:
         5f:7b:30:6b:09:e4:b5:90:7c:80:ca:a0:a6:68:9e:29:ef:fd:
         f0:06:eb:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3
NjdDNzBEMzgwHhcNMjYwNDA1MDA0MDE2WhcNMjYwNDEyMDA0MDE2WjAYMRYwFAYD
VQQDEw02OWQxYWY3MC02NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRxRWOR5a5HM+SrHs1gGmyZnabhTVDIvUtf+THsaP99Zl5kBf2RQqpQrseLL
J5IAumwVKFOZ1obDPlxt5KSjMVNy+px1cMvVXJJ4nFEvKqTcITPXBJP5nm75Mgaa
wBSNPGFgdVpcbCLSbHtZFxPhm63nUZelHwa9kXJdtvWuP5oCrrg0FHt6xB6oM7vN
fOQFWI90vOcJ35oPE/rF9nIu/yBv43IjfZNIUpaMEOb33VoEvO3hNVEDTEUcj2Qk
DbKOA3AqkqQajFprHAOFf/85XW0avMUgVhovq2wrqG/5JkA2H//juI0W+gyoqRDc
HDGRV4C+gGP5UJ2Sv543ZLh8gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzGxWpQ
hsvi+d597n/XjK3oUVxAMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx
OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5
ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO1Mxu+Lt+eBWi4D1rKeGuAvOIrgPTEwpLBrE7wULgHVY8X6jUCRYVKoLedYx
x/ie/TUQbGeH1w38Q491IY2eSJe3z+AchzFALNbjJ91JL+ZzbcTKRPDREJJqIy/f
gObbibrDr88x4be7C7tg3YjLZJ6yqUEXqtlga29KXDZU7+jhDOiIkEMeCD/JkNCd
bRTR1JQs5azyPtXW4BCeOPBX2ELwm3tTcL/K8SS8UheK2Q8LWLrxRO16U7H05Ax2
TxLUthcFrDeRlue6Du8rODZ1HAfXsYoJhpqKBTR9hw79MhMH+nLEoSd7/MCkX3sw
awnktZB8gMqgpmieKe/98AbrYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:45:53 2026 by rpki-client